Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: 8vIgQGJ0pEgk5POtB9gpIBlpQB4maJBk1j99wQeLC+I=
Subject key identifier: 21:D0:D5:B5:41:7D:6B:C7:06:08:D7:AF:D9:75:2B:50:47:29:90:32
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 01976EF4C39CFA1CB99B7FF52ADB3509BE5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 1145
Signing time: Sat 14 Jun 2025 15:00:23 +0000
Manifest this update: Sat 14 Jun 2025 15:00:23 +0000
Manifest next update: Sun 15 Jun 2025 15:00:23 +0000
Files and hashes: 1: 1-9PbJd606SAcljFaDXOqMtimHsk.roa (hash: KXw8kntxbx0A19gUTumtpNuhW4BHiQmmsQFSl5B6ZYs=)
2: 2-vgpJwDsEY_VoNu8cnFA12khB8.roa (hash: iUnRP/l7HzWTkjMJX+R7OEZ9+tX6NbtdM3UPohuBzqw=)
3: 8w9BEQzRPPy9olwFaw-Zn6Va6YU.roa (hash: g6jDxz/UxGzzizwSc5CDzUUAAjalGAWQr2yYfR64f7Y=)
4: Egh3cL0v2_H-TY-QEmnrWnX0arg.roa (hash: uAUHTXbdFEHAhORw9S54HkonrjueALJUqc4yeHLWHu8=)
5: TvcD9AMtT0yWtHonps0hocI3dlg.roa (hash: fuU4HZNYKHN5G71TXaO9NMKHsWQTf51zKQ44BmOWV1o=)
6: nSrKwFeL2JWJX-O6yRsJjMyenO4.roa (hash: T5rsVBpHF0FkBvtcb+csX6yuqxHhug7dklzF66IL7J0=)
7: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: 7NEIbMUAsNd+C+q6GyUmmsieoa+ijXvmS0Hdj5BSaHY=)
8: vEaBzwoEAwzosXDFzJLUwLp5Y64.roa (hash: P0SFRAVbYdQfuoozG6LdZarwkxJX0gGTe/XAuMu2MyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f4:c3:9c:fa:1c:b9:9b:7f:f5:2a:db:35:09:be:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Jun 14 15:00:23 2025 GMT
Not After : Jun 15 15:00:23 2025 GMT
Subject: CN=21d0d5b5417d6bc70608d7afd9752b5047299032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:37:55:54:29:59:50:91:6f:94:a9:e2:ec:
cd:9f:a1:2e:37:38:cf:e8:d3:98:08:8f:a5:b8:e1:
b5:d1:77:94:ca:7e:f7:53:38:2f:28:98:cc:e0:69:
ff:ec:57:17:e9:62:f3:08:83:d4:25:7c:c1:31:6f:
3d:bc:81:84:16:42:08:ad:10:76:54:75:91:f3:26:
3b:6c:f2:46:0b:1b:91:8f:bc:14:d1:f3:94:61:f9:
03:77:6f:98:83:27:7f:27:92:e7:40:25:fd:e7:f1:
8c:89:07:cf:df:e8:69:43:5a:8b:ca:54:ec:d4:e5:
85:75:c4:f1:a2:b2:a1:04:71:ad:0b:50:a2:86:76:
c4:c7:0a:0b:0a:51:69:38:fd:45:03:53:da:4e:40:
f1:e9:43:08:4f:51:aa:6b:95:0f:ed:b3:6e:2c:d2:
56:29:b1:2e:51:0b:a2:d4:de:97:c4:18:c3:bd:41:
c2:09:a6:ed:16:ae:f7:f1:e3:6f:d3:2f:80:22:95:
b9:f2:0f:d3:9c:a4:60:8d:17:5d:68:e3:f2:86:8f:
6d:37:3b:b4:09:bc:1d:51:fd:66:c2:08:52:68:31:
ca:ee:c3:b5:ab:ed:3b:d6:2c:34:a5:50:38:d1:24:
a4:87:3b:12:b5:d5:3d:1f:d9:67:c2:69:c6:08:86:
13:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D0:D5:B5:41:7D:6B:C7:06:08:D7:AF:D9:75:2B:50:47:29:90:32
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bd:11:02:e0:0f:97:c4:1f:47:c2:e8:fe:5a:84:5d:f0:df:
25:eb:a7:5b:b1:c4:f1:c9:7a:90:b0:46:bc:d2:ee:75:1c:d4:
88:26:9a:f0:13:46:60:c2:c8:41:93:df:2d:15:a1:48:26:23:
57:1f:86:b1:06:c2:14:ca:9a:01:56:39:14:85:14:00:7c:4a:
1f:48:ce:84:6c:40:18:b4:0a:be:43:7a:55:93:3f:ca:2a:31:
7d:da:0d:7e:5c:2b:2c:01:bb:9a:2c:c2:0c:71:9a:4b:ee:50:
26:30:cd:09:5a:74:2e:ae:48:c3:4d:c5:ee:81:49:9b:ff:fb:
a0:20:6d:44:c7:a7:73:cc:32:02:de:31:24:89:b1:79:29:62:
0b:5a:4f:3e:44:67:cc:11:78:72:5e:f7:57:b0:45:59:7a:37:
ea:a2:af:aa:40:4f:92:d7:73:10:a1:9c:c3:0e:5f:80:8b:5c:
e0:a5:f9:75:24:c4:fe:8c:b3:aa:d0:22:11:c1:7b:fc:9b:48:
31:18:9b:70:5b:2d:43:cd:92:61:30:6e:7b:08:58:1b:48:a1:
0f:bb:de:40:7e:9c:12:1d:7f:1b:c4:b4:8e:64:29:fa:38:e3:
24:82:23:1d:7e:4a:e9:e5:5f:31:95:09:24:8a:64:bc:fa:73:
86:b6:bc:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9MOc+hy5m3/1Kts1Cb5bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhZjQ5Njk4NDJkZTljNGMxZTFhNTc1OWQ5OGQxZWQ1YzBk
NjJlZjgwHhcNMjUwNjE0MTUwMDIzWhcNMjUwNjE1MTUwMDIzWjAzMTEwLwYDVQQD
EygyMWQwZDViNTQxN2Q2YmM3MDYwOGQ3YWZkOTc1MmI1MDQ3Mjk5MDMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv883VVQpWVCRb5Sp4uzNn6EuNzjP
6NOYCI+luOG10XeUyn73UzgvKJjM4Gn/7FcX6WLzCIPUJXzBMW89vIGEFkIIrRB2
VHWR8yY7bPJGCxuRj7wU0fOUYfkDd2+Ygyd/J5LnQCX95/GMiQfP3+hpQ1qLylTs
1OWFdcTxorKhBHGtC1CihnbExwoLClFpOP1FA1PaTkDx6UMIT1Gqa5UP7bNuLNJW
KbEuUQui1N6XxBjDvUHCCabtFq738eNv0y+AIpW58g/TnKRgjRddaOPyho9tNzu0
CbwdUf1mwghSaDHK7sO1q+071iw0pVA40SSkhzsStdU9H9lnwmnGCIYT1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHQ1bVBfWvHBgjXr9l1K1BHKZAyMB8GA1UdIwQY
MBaAFKr0lphC3pxMHhpXWdmNHtXA1i74MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC83MjBmOWYtZjBiOC00NGQyLTgzNjct
ZjgxZmRmNzRlNjU1LzEvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC83MjBmOWYtZjBiOC00NGQyLTgzNjctZjgxZmRmNzRlNjU1
LzEvcXZTV21FTGVuRXdlR2xkWjJZMGUxY0RXTHZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc70RAuAP
l8QfR8Lo/lqEXfDfJeunW7HE8cl6kLBGvNLudRzUiCaa8BNGYMLIQZPfLRWhSCYj
Vx+GsQbCFMqaAVY5FIUUAHxKH0jOhGxAGLQKvkN6VZM/yioxfdoNflwrLAG7mizC
DHGaS+5QJjDNCVp0Lq5Iw03F7oFJm//7oCBtRMenc8wyAt4xJImxeSliC1pPPkRn
zBF4cl73V7BFWXo36qKvqkBPktdzEKGcww5fgItc4KX5dSTE/oyzqtAiEcF7/JtI
MRibcFstQ82SYTBuewhYG0ihD7veQH6cEh1/G8S0jmQp+jjjJIIjHX5K6eVfMZUJ
JIpkvPpzhra83g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 21:45:23 2025 by rpki-client